             [clojure.pprint :refer [pprint]]))
 
 (def account-id "12345")
+(def default-sgs ["allow_outbound" "allow_ssh"])
+
 (letfn [(merge-in* [a b]
           (if (map? a)
             (merge-with merge-in* a b)

                                (assoc map :ebs_block_device ebs_block_device)
                                map))
        root_block_device (get spec :root_block_device {})
        asg-config
        (merge-in
         (resource "aws_iam_instance_profile" name

                                         :user_data user_data
                                         :lifecycle { :create_before_destroy true }
                                         :key_name (get spec :key_name "ops-terraboot")
                                         :security_groups security-groups
                                         :associate_public_ip_address (or public_ip false)
                                         :root_block_device root_block_device}

